Lucene search

K
WedevsHappy Addons For Elementor

4 matches found

CVE
CVE
added 2024/04/09 7:15 p.m.41 views

CVE-2024-2787

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated ...

6.4CVSS7.6AI score0.00138EPSS
CVE
CVE
added 2024/06/29 7:15 a.m.40 views

CVE-2024-5790

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for au...

6.4CVSS5.5AI score0.00089EPSS
CVE
CVE
added 2024/09/25 1:15 a.m.38 views

CVE-2024-8801

The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data in...

4.3CVSS4.7AI score0.00188EPSS
CVE
CVE
added 2024/01/11 9:15 a.m.31 views

CVE-2023-6632

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 (versions up to 2.9.1.1 in Happy Addons for Elementor Pro) due to insufficient input sanitization and output escaping. This makes it possible for u...

6.1CVSS6.2AI score0.02521EPSS